Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3A348060059511ECB2896C55C4F9AE02.roa
File:                     3A348060059511ECB2896C55C4F9AE02.roa (raw, json)
Hash identifier:          Je66smlLYuT0LcCAwubjp0i6pPHnhXsA8KGFjr4t064=
Subject key identifier:   78:B4:A4:6E:3D:FF:FE:49:DF:B1:A8:C6:A0:D5:30:88:39:0E:A6:3A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       8DAF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3A348060059511ECB2896C55C4F9AE02.roa
Signing time:             Thu 30 May 2024 16:16:36 +0000
ROA not before:           Thu 30 May 2024 16:16:36 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     141809
IP address blocks:        1.7.246.0/24 maxlen: 24
                          2001:e48:33:1007::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36271 (0x8daf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: May 30 16:16:36 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6658a664-0936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:83:8a:de:99:8c:a1:cf:a6:e0:97:e2:14:
                    d6:3c:64:9d:a7:fc:ee:30:95:54:90:8f:f9:a0:48:
                    cc:cf:48:a5:04:4a:d6:ea:73:b4:fa:8f:73:64:f5:
                    36:0a:2f:d1:15:75:45:56:be:84:4d:1b:42:7b:b6:
                    ed:5c:ba:62:77:3e:b0:5d:e2:3e:56:80:6b:3b:24:
                    d8:52:c8:c2:8f:00:ce:94:16:cb:8a:0f:39:d6:4d:
                    2d:eb:67:09:04:4f:a3:3a:da:68:68:4c:5d:11:cb:
                    5e:d2:bd:e8:2e:f8:34:78:82:3f:d3:51:36:18:03:
                    29:fc:6b:4e:36:d6:30:f0:ce:b7:45:5d:58:a6:50:
                    b0:be:d5:70:5c:b5:a2:bb:be:ab:ee:18:e0:84:c5:
                    55:13:a2:1a:8a:ca:7a:fc:01:1c:05:21:13:fc:0e:
                    b0:2e:1d:b6:30:66:3e:72:25:78:0b:ad:38:f7:81:
                    20:d1:89:2d:13:38:48:96:34:2e:a5:16:88:da:98:
                    66:54:9f:41:19:24:98:99:b7:a3:6a:c6:1b:79:ce:
                    db:4f:df:cb:d6:1e:12:65:99:bb:1b:18:b2:13:ee:
                    7b:6c:8c:49:bc:1a:91:e3:0d:ba:35:5b:86:b7:48:
                    0d:18:e5:28:b2:7b:66:7f:bc:d1:1b:b7:96:a7:50:
                    08:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B4:A4:6E:3D:FF:FE:49:DF:B1:A8:C6:A0:D5:30:88:39:0E:A6:3A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3A348060059511ECB2896C55C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.7.246.0/24
                IPv6:
                  2001:e48:33:1007::/64

    Signature Algorithm: sha256WithRSAEncryption
         38:4a:4e:c2:1e:c4:12:da:d1:09:fb:df:82:70:46:75:51:12:
         5c:49:19:e3:c3:7d:69:ff:db:fc:d6:4d:35:5d:34:21:cd:69:
         6a:40:12:4b:76:34:ef:46:b8:c8:31:b3:e8:71:67:7f:68:77:
         d9:ac:4d:6a:20:5e:43:92:76:c4:31:ab:72:6b:82:de:32:4f:
         25:e4:08:9f:aa:87:6d:85:df:23:d4:1a:56:ff:1c:17:5f:2c:
         6a:c9:d4:b9:38:c3:0f:d7:07:e2:26:82:e6:58:b7:71:98:19:
         f7:0c:bf:78:a7:3b:f6:ac:10:13:67:e8:51:94:d1:63:b2:23:
         7f:16:8f:4e:eb:2f:26:b7:8d:8e:5f:26:f2:e3:2b:4e:1f:eb:
         6e:9f:76:ee:9a:84:51:38:c3:f9:50:6b:35:35:17:8c:11:82:
         0c:c1:47:fb:44:36:de:25:d1:a2:de:ae:b9:56:50:97:f0:3d:
         d9:64:ea:c2:41:ed:ed:66:08:64:45:b7:28:c6:d2:f8:80:ef:
         85:cb:ca:4b:3a:9e:5c:22:31:2f:33:cb:24:d8:51:ea:58:1c:
         ed:0e:b3:4e:56:48:30:bc:f2:d1:a9:84:81:3f:bd:ee:7e:1e:
         fc:50:99:15:f0:c9:46:9a:6c:e6:e4:b2:06:73:1e:37:7c:84:
         6a:b2:74:9f
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIDAI2vMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI0MDUzMDE2MTYzNloXDTI1MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjY1OGE2NjQtMDkzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALjug4remYyhz6bgl+IU1jxknaf87jCVVJCP+aBIzM9IpQRK1upztPqPc2T1
Ngov0RV1RVa+hE0bQnu27Vy6Ync+sF3iPlaAazsk2FLIwo8AzpQWy4oPOdZNLetn
CQRPozraaGhMXRHLXtK96C74NHiCP9NRNhgDKfxrTjbWMPDOt0VdWKZQsL7VcFy1
oru+q+4Y4ITFVROiGorKevwBHAUhE/wOsC4dtjBmPnIleAutOPeBINGJLRM4SJY0
LqUWiNqYZlSfQRkkmJm3o2rGG3nO20/fy9YeEmWZuxsYshPue2yMSbwakeMNujVb
hrdIDRjlKLJ7Zn+80Ru3lqdQCFsCAwEAAaOCAqgwggKkMB0GA1UdDgQWBBR4tKRu
Pf/+Sd+xqMag1TCIOQ6mOjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNBMzQ4MDYw
MDU5NTExRUNCMjg5NkM1NUM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMDIGCCsGAQUFBwEHAQH/
BCMwITAMBAIAATAGAwQAAQf2MBEEAgACMAsDCQAgAQ5IADMQBzANBgkqhkiG9w0B
AQsFAAOCAQEAOEpOwh7EEtrRCfvfgnBGdVESXEkZ48N9af/b/NZNNV00Ic1pakAS
S3Y070a4yDGz6HFnf2h32axNaiBeQ5J2xDGrcmuC3jJPJeQIn6qHbYXfI9QaVv8c
F18sasnUuTjDD9cH4iaC5li3cZgZ9wy/eKc79qwQE2foUZTRY7IjfxaPTusvJreN
jl8m8uMrTh/rbp927pqEUTjD+VBrNTUXjBGCDMFH+0Q23iXRot6uuVZQl/A92WTq
wkHt7WYIZEW3KMbS+IDvhcvKSzqeXCIxLzPLJNhR6lgc7Q6zTlZIMLzy0amEgT+9
7n4e/FCZFfDJRpps5uSyBnMeN3yEarJ0nw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:15 2025 by rpki-client